Post #2886322
2026-05-15 08:52 UTC
@icing@chaos.social at libssh we're considering the policy of filing all bugs under a certain CVSS threshold (5 or 6) as regular bug reports in bug tracking and fix them without any embargo to avoid clogging up the security pipeline
Replies (1)
-
@stevel@hachyderm.io 2026-05-15 09:37
@aris@infosec.exchange @icing@chaos.social if its not RCE in a normal deployment - it's just a normal bug. Makes sense,